post-quantum verification